This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/BBEExDLi9wN2ArwpnoUathyZ5G4.roa File: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (raw, json) Hash identifier: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0= Subject key identifier: 04:11:04:C4:32:E2:F7:03:76:02:BC:29:9E:85:1A:B6:1C:99:E4:6E Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Certificate serial: 019B7CEE0DA033F1C70FE7EA203229E47456 Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/BBEExDLi9wN2ArwpnoUathyZ5G4.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 178.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0d:a0:33:f1:c7:0f:e7:ea:20:32:29:e4:74:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=041104c432e2f7037602bc299e851ab61c99e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:93:16:62:4c:61:d5:55:ae:ba:2e:d1:b1: df:11:6d:a2:3d:c1:72:ed:b9:c1:03:06:57:52:0f: 45:36:44:86:d4:43:2c:6b:75:c8:ce:94:a0:65:08: 9b:4e:69:29:c8:7d:fb:4b:a3:37:04:20:4d:44:b3: 9d:38:cc:01:ee:5d:3c:5c:47:5d:0e:b9:6f:45:8e: d4:6f:64:f8:ad:ea:ed:f5:86:c5:f7:8e:47:97:c0: eb:f7:b4:d9:51:76:fa:51:36:0a:c3:f1:55:78:77: cc:11:5f:c4:40:2c:32:cb:23:ec:5f:15:ed:74:57: 0f:c6:c4:5a:27:a1:c4:8e:63:1f:8e:5d:e7:7e:0d: 71:92:98:ed:88:92:a5:d1:35:b2:73:60:9a:88:19: 0f:c1:1d:ae:c6:b0:ea:92:2f:59:5b:28:55:ce:39: 96:98:7f:84:de:db:ec:81:ee:dd:59:d9:e8:23:61: ee:d0:1a:d9:80:ed:11:6c:89:69:f0:3c:8b:89:61: 87:8f:e1:57:42:ae:6a:a5:58:a6:96:aa:b6:65:db: 09:d0:6d:3d:22:93:7b:bf:67:41:8c:1d:10:a9:a0: 84:8c:7a:75:d5:11:3b:80:46:1e:54:43:72:9f:70: c5:49:56:f5:d5:f4:c8:2b:4c:dd:8f:e2:72:c7:e3: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:04:C4:32:E2:F7:03:76:02:BC:29:9E:85:1A:B6:1C:99:E4:6E X509v3 Authority Key Identifier: keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/BBEExDLi9wN2ArwpnoUathyZ5G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.242.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ac:8e:2d:48:31:62:c5:41:a4:80:84:79:a9:70:fd:85:a3: 7c:98:51:66:80:4b:91:09:c0:24:21:52:6b:54:5b:d5:0e:c5: 7b:b3:8d:46:3c:67:82:36:51:65:05:31:7a:a8:ab:34:7b:cb: 72:77:5c:0a:27:68:01:5e:5a:8d:05:d5:c1:72:da:e5:e6:92: 43:57:ae:aa:df:fb:e7:4c:e2:40:d0:3b:a5:54:f3:90:49:f9: 4c:93:6d:05:62:af:dd:ab:56:10:73:ce:ec:11:88:c0:1f:51: 80:e0:e3:40:52:21:4b:62:0b:5c:b0:6a:d5:a6:8d:f8:9b:fb: 85:25:8e:f7:c4:c7:7f:5f:30:c1:50:d5:08:98:78:9a:26:59: 72:30:d1:cc:43:26:9c:0f:f5:d2:51:11:aa:64:53:54:7b:96: 81:56:ae:f3:dd:84:ac:fe:a5:59:ec:3e:ee:72:38:34:d7:95: 4e:55:c1:a4:c5:c6:99:c5:19:eb:ed:5b:ea:71:4b:44:ba:75: 96:ba:4f:ff:03:a7:b0:eb:8f:c9:04:a9:86:d2:fd:5e:3d:78: 71:2d:f0:23:74:50:e4:a4:65:f6:8c:fc:8b:ed:ab:26:4d:b3: 11:ed:f7:41:3a:48:76:44:70:95:5c:a5:56:bb:01:b8:3a:ef: 40:14:99:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87g2gM/HHD+fqIDIp5HRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl NzBhMTIwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDExMDRjNDMyZTJmNzAzNzYwMmJjMjk5ZTg1MWFiNjFjOTllNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4aTFmJMYdVVrrou0bHfEW2iPcFy 7bnBAwZXUg9FNkSG1EMsa3XIzpSgZQibTmkpyH37S6M3BCBNRLOdOMwB7l08XEdd DrlvRY7Ub2T4rert9YbF945Hl8Dr97TZUXb6UTYKw/FVeHfMEV/EQCwyyyPsXxXt dFcPxsRaJ6HEjmMfjl3nfg1xkpjtiJKl0TWyc2CaiBkPwR2uxrDqki9ZWyhVzjmW mH+E3tvsge7dWdnoI2Hu0BrZgO0RbIlp8DyLiWGHj+FXQq5qpVimlqq2ZdsJ0G09 IpN7v2dBjB0QqaCEjHp11RE7gEYeVENyn3DFSVb11fTIK0zdj+Jyx+P6eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQRBMQy4vcDdgK8KZ6FGrYcmeRuMB8GA1UdIwQY MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt OThlOWUyNTEwYmI2LzEvQkJFRXhETGk5d04yQXJ3cG5vVWF0aHlaNUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2 LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv/yMA0G CSqGSIb3DQEBCwUAA4IBAQCVrI4tSDFixUGkgIR5qXD9haN8mFFmgEuRCcAkIVJr VFvVDsV7s41GPGeCNlFlBTF6qKs0e8tyd1wKJ2gBXlqNBdXBctrl5pJDV66q3/vn TOJA0DulVPOQSflMk20FYq/dq1YQc87sEYjAH1GA4ONAUiFLYgtcsGrVpo34m/uF JY73xMd/XzDBUNUImHiaJllyMNHMQyacD/XSURGqZFNUe5aBVq7z3YSs/qVZ7D7u cjg015VOVcGkxcaZxRnr7VvqcUtEunWWuk//A6ew64/JBKmG0v1ePXhxLfAjdFDk pGX2jPyL7asmTbMR7fdBOkh2RHCVXKVWuwG4Ou9AFJmh -----END CERTIFICATE-----Generated at Mon Jan 12 15:45:21 2026 by rpki-client